$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft File: 0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json) Hash identifier: DrSXno3gScFkpFV5eFLDduLonB0hXTyNh+9X55GkgvY= Subject key identifier: E8:48:43:62:4E:59:4C:39:14:6A:81:E7:74:43:B4:40:23:61:B3:E3 Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73 Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73 Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft Manifest number: 060B Signing time: Fri 28 Mar 2025 23:12:33 +0000 Manifest this update: Fri 28 Mar 2025 23:12:33 +0000 Manifest next update: Fri 04 Apr 2025 23:12:33 +0000 Files and hashes: 1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: 5Bid0rSRBBuWF2MBcIs6yUPqtO7MmNf+f3if4f0NFSA=) 2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: gNOxN0jS6tigz/fNFU0Y3AnQczkJKZKVIShHQJ5nxmY=) 3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: Bdwc8QswyKEgheRUIFpGKVEVqvl2AD4iR5m0y3NHcjU=) 4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: z9ucsnrgZh6AB82HfRMNRNeuXi0RQH7hg4PLxBkGO2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8 Validity Not Before: Mar 28 23:12:33 2025 GMT Not After : Apr 4 23:12:33 2025 GMT Subject: CN=67e72ce1-ec1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:1d:2e:dd:ae:0a:d1:16:fc:6a:1f:bf:b2: a7:bc:2f:e6:55:6e:0d:2d:44:63:26:0b:49:61:d6: d7:aa:83:ad:89:2a:72:7a:50:a3:ab:22:d2:8c:20: 15:7e:5f:f4:14:46:a0:14:de:ea:b0:05:3b:0d:02: 5f:09:af:b3:99:58:e7:c7:e0:c1:77:a3:f1:de:5f: 94:02:6e:4c:41:32:7f:ca:94:f7:4a:ea:04:6e:62: 4b:9b:3e:aa:92:c4:ee:26:3a:37:dc:c7:44:dc:df: 6e:21:46:2f:b9:23:c3:53:b3:3b:3c:08:52:8d:7d: 63:1a:37:c7:cc:7f:cb:c3:48:73:ea:34:ea:62:8f: f2:7b:3f:83:91:bd:28:31:11:75:a2:40:a0:c2:b5: a6:1d:e7:e0:7d:ea:9f:8f:12:32:bf:cb:17:ad:32: 5e:1f:ae:3d:a9:ee:6b:c5:79:78:a3:35:f5:d6:e2: ec:2f:c5:d2:d8:91:f7:a5:83:26:6b:3d:0e:ec:28: a7:de:87:70:25:9e:b0:4d:7d:f8:5e:1e:96:e0:34: 3f:5b:28:1c:21:d8:7c:a2:15:56:1e:a4:ec:7b:d2: ee:bc:4b:7a:20:52:51:c8:35:38:c2:be:01:0e:6d: 25:40:0b:b6:64:0a:84:56:87:21:e4:7e:72:54:eb: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:43:62:4E:59:4C:39:14:6A:81:E7:74:43:B4:40:23:61:B3:E3 X509v3 Authority Key Identifier: keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0d:6f:b2:a2:a6:3e:61:9d:6c:17:fe:a7:41:56:29:6b:f4: a5:a3:1b:5b:1a:df:82:80:2c:9f:35:ef:b1:64:7e:07:80:e9: b9:15:82:68:00:72:9a:41:d8:89:e0:08:9e:08:c4:2b:17:65: d0:7f:ca:16:9a:d8:34:cf:d5:d9:1e:df:37:91:fb:67:82:62: d4:b6:71:49:b8:0d:1c:ce:ea:60:66:41:df:e5:e3:cf:67:db: 27:de:17:87:9e:e8:82:4c:c4:58:cc:3e:82:9c:c3:a3:04:c6: 80:ad:6e:20:41:e3:7f:7c:2d:f4:df:d3:7a:7d:c4:8f:7d:72: 4e:12:16:e3:33:90:b1:ed:c5:65:89:4a:f2:78:21:03:93:be: 26:cd:3b:52:dd:fe:fa:d1:e9:21:ff:99:36:86:53:6a:a9:2d: 89:6d:4a:1b:85:e0:29:2a:d0:82:19:16:a0:14:97:9e:55:45: 16:85:bf:c3:c5:15:3e:c9:ea:6d:a3:6b:59:37:a6:13:97:e5: e1:16:5c:d0:76:dc:3a:fe:59:4e:7e:c6:4e:28:51:c0:80:08: 5e:e9:b9:62:56:58:4a:37:10:a3:ae:eb:e3:37:b9:19:7f:b6: 05:00:24:fd:b3:40:72:94:20:6b:ed:fb:bd:48:57:54:9d:0c: 39:a2:70:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3 RTA5NDdENzMwHhcNMjUwMzI4MjMxMjMzWhcNMjUwNDA0MjMxMjMzWjAYMRYwFAYD VQQDEw02N2U3MmNlMS1lYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNIdLt2uCtEW/Gofv7KnvC/mVW4NLURjJgtJYdbXqoOtiSpyelCjqyLSjCAV fl/0FEagFN7qsAU7DQJfCa+zmVjnx+DBd6Px3l+UAm5MQTJ/ypT3SuoEbmJLmz6q ksTuJjo33MdE3N9uIUYvuSPDU7M7PAhSjX1jGjfHzH/Lw0hz6jTqYo/yez+Dkb0o MRF1okCgwrWmHefgfeqfjxIyv8sXrTJeH649qe5rxXl4ozX11uLsL8XS2JH3pYMm az0O7Cin3odwJZ6wTX34Xh6W4DQ/WygcIdh8ohVWHqTse9LuvEt6IFJRyDU4wr4B Dm0lQAu2ZAqEVoch5H5yVOstNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhIQ2JO WUw5FGqB53RDtEAjYbPjMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5DW+yoqY+YZ1sF/6nQVYpa/SloxtbGt+CgCyfNe+xZH4HgOm5FYJo AHKaQdiJ4AieCMQrF2XQf8oWmtg0z9XZHt83kftngmLUtnFJuA0czupgZkHf5ePP Z9sn3heHnuiCTMRYzD6CnMOjBMaArW4gQeN/fC3039N6fcSPfXJOEhbjM5Cx7cVl iUryeCEDk74mzTtS3f760ekh/5k2hlNqqS2JbUobheApKtCCGRagFJeeVUUWhb/D xRU+yepto2tZN6YTl+XhFlzQdtw6/llOfsZOKFHAgAhe6bliVlhKNxCjruvjN7kZ f7YFACT9s0BylCBr7fu9SFdUnQw5onCL -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:52 2025 by rpki-client